An incorrect authorization vulnerability (CWE-863) exists in the Threat Intelligence functionality of Nozomi Networks Guardian. Authenticated users assigned view-only privileges can bypass intended access restrictions and execute administrative actions, including modifying rules configuration and impacting the availability of the Threat Intelligence feature. This flaw compromises the integrity and availability of the affected component. The vulnerability has a CVSS 4.0 base score of 7.2, indicating high severity. There is no vendor-provided remediation or patch information available at this time, and the product is not a cloud service.

Authenticated users with only view-only privileges can escalate their permissions to perform administrative actions within the Threat Intelligence functionality. This can lead to unauthorized modification of rules and disruption of service availability, potentially impacting the security monitoring capabilities of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the Threat Intelligence functionality to trusted users only and monitor for unusual administrative activity.